The Register® — Biting the hand that feeds IT

Feeds

Cabinet Office government-by-Facebook plans probed

'Get the ICO in,' advises 'Recipe for ripoffs' report

What you need to know about cloud backup

MPs have called on the government to work with the Information Commissioner on how to implement the Cabinet Office's personal data proposals, which include the possibility of farming out its ID-handling to third parties such as banks and Facebook.

The Public Administration Select Committee's report entitled Government and IT - 'a recipe for rip-offs': time for a new approach was published this morning.

Among other things it recommended that the government should work on its grand plans in cooperation with the UK's data watchdog.

"Giving control of personal data to the individual has the potential to improve data quality while reducing both costs and risks. Individuals are used to controlling their own data with private sector companies, such as Amazon and with utility companies," reads the report.

"Moving to a model where the citizen maintains their own personal data with an independent, trusted provider and then can choose whether to authorise the sharing of that information with other organisations is an ambitious vision that will need to be trialled extensively."

As we exclusively reported in June, the Cabinet Office has been in talks with Facebook and other social networks about how those platforms could be used by British citizens to sign into public services online.

A so-called "ID assurance" prototype is expected in October this year. However, the report struck a cautionary note about Francis Maude's department proceeding with such a plan.

"We also recognise that there may be legal constraints and concerns about privacy which could act as a barrier to implementing such a radical reform," said the MPs.

"We therefore recommend that the government, working with the Information Commissioner, review potential barriers to the personal data model and explore the ways in which this model could best be developed.

"We welcome the work being done to create an integrated identity assurance trust model for simplifying access to government services. We suggest that government consider integrating this work with the personal data model. This could represent an important step, placing responsibility and control of personal data with citizens in their interactions with public and other online services."

Facebook, as part of evidence submitted to the committee of MPs, offered its "expertise" on open platforms, even though none other than Tim Berners Lee has previously argued against the notion that the dominant social network is into the sharing data game.

"The majority of applications on Facebook are not designed by its employees but by independent developers whose applications integrate with Facebook’s core services.

"This open platform model provides an interesting insight into how future government services might operate better: enabling government information and services to be provided to citizens where and when they need them."

But such a suggestion has already been greeted with concern by privacy advocates, who are worried that the Cabinet Office has simply found a creative way of building an ID database via third parties, thereby offloading the burden wholesale onto the private sector.

Maude has cast these ID assurance plans as a way of cutting duplication and thus saving money for the public purse.

The first public services earmarked for testing of the system include the Department for Work and Pension’s universal credits, NHS HealthSpace, HMRC’s one click programmes and the Skills Funding Agency.

The Cabinet Office has ambitious plans to fully implement the scheme by August next year. Whether the Information Commissioner will advise a block on such "radical reform" remains to be seen, however. ®

Agentless Backup is Not a Myth

No

To state what should be obvious: British citizens should not have to store sensitive data in countries outside the jurisdiction of the Data Protection Act, just to access UK public services.

Whoever proposed this must be insane.

7
0
Anonymous Coward

Oh the quotes, such gems, they hurt.

"Moving to a model where the citizen maintains their own personal data with an independent, trusted provider and then can choose whether to authorise the sharing of that information with other organisations is an ambitious vision that will need to be trialled extensively."

Sure guv. Who owns that data then?

Not me, not you, but an overseas multinational. So I get my account suspended for some canard or other, so aptly demonstrated by google+ and facebook earlier. So I suddenly cease to exist for the government. Who'm I gonna call?

The ease by which this "trust" is bestowed onto this unknown third party (as we all know, all the usual suspects are not in any way trustworthy and have no incentive to become so) is frightening. Not unusual as neither is the fact the people concocting this scheme haven't a clue, but frightening nonetheless.

"Maude has cast these ID assurance plans as a way of cutting duplication and thus saving money for the public purse."

So you do suppose facebook and google+, and heck bebo, myspace, beautiful people, orkut, qq, and whoever else is out there, have become best pals and share data now?

It's not "cutting duplication", it's "out of sight, out of mind, for the government". But that still means they're not doing their job. I'd hardly call that "radical reform" to be honest.

To provide to the people an assurance platform that can deal with anonymity, pseudonymity, realnameity, pennameity, and so on, and so forth, and that the others can plug into without also taking ownership of the data, that would be radical and new and useful. Government grade assurance while the citizen keeps ownership and fine-grained control as to who has access to the data. And while at it, can enforce all verifications be mutual so that the verificee knows the verificator had in fact a right to do this and gets to keep a log of what when actually happened. That puts the means next to the incentive to see who's meddling with the data and ought to cut back on abuse some.

But all that'd require real innovation, academic research even. The government is too short bus and not enough brilliant to provide real radical reform to the people. We knew all that already, but it deserves to be said regardless. For the cabinet office, it so clearly is devoid of clues again. Carry on government.

6
0

You have GOT to be bloody kidding?

First para, and already my jaw is on the floor... "ID-handling to third parties such as banks and Facebook"

banks? OK, yeah, I follow the thinking, the Germans use (or at least did a while back, dunno about now) banks to issue ID cards so that's not too much of a stretch. But bloody FACEBOOK?!?!?!

So much for infosec then.

Might as well dump all my personally identifiable info, old passportss, credit history, everything, into a bin, park it outside my home, and stick a sign on it saying "ID Thieves, look here first".

More bloody cloud cuukoo land thinking from the Hot Air Housing Project.

5
0

More from The Register

 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
 breaking news
NSA whistleblower to tech firms, Obama: 'Grow a pair!'
Ed Snowden: Email tracking grabs 'IPs, raw data, content, headers, attachments, everything'
Google flings another £1m at online child sex abuse vid CRACKDOWN
See, see, we're trying, ad giant tells Daily Mail UK.gov
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
SCO vs. IBM battle resumes over ownership of Unix
Zombie lawsuit back and wants to suck the brains out of Linux
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
NSA: We COULD track you by your phone ... if we WANTED to
Honestly, too much work, can't be bothered